Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
File:                     xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json)
Hash identifier:          RxX9259J4627H8dsONqvFnNxKiAb549aeBVbA3sBYXI=
Subject key identifier:   D1:BE:E0:62:4D:97:AF:A5:1B:63:68:78:D5:36:4E:8D:B2:7E:9A:51
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Certificate issuer:       /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial:       04FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
Manifest number:          04CE
Signing time:             Thu 23 Jul 2026 00:42:26 +0000
Manifest this update:     Thu 23 Jul 2026 00:42:25 +0000
Manifest next update:     Thu 30 Jul 2026 00:42:25 +0000
Files and hashes:         1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: /lX1BhG1kYIa2hVDZXw7uCOToMH0I2FIFSnTLEukvN0=)
                          2: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: TYYIQ0iKctVFngYjoXqXM7SKx8woLPPUnuROtzeNaq4=)
                          3: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: fdGiVPweujLtnlzQBkxSdHNbQU/GitI5AIHJtY/ChyQ=)
                          4: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: 3u67oMwzGOz5a39ev00s5EB6ZROVZTn6ToX//42/CIo=)
                          5: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: ZfXqil/HZcQKRq3QzpskMCnsaTW6MQfjBYeGj9Tkbjo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
                          rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
        Validity
            Not Before: Jul 23 00:42:25 2026 GMT
            Not After : Jul 30 00:42:25 2026 GMT
        Subject: CN=6a616372-ac95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:17:32:71:5b:3c:3a:23:10:03:51:22:24:
                    53:45:b9:fa:c9:79:5b:44:58:d5:72:58:f6:47:2f:
                    8b:d0:85:28:b5:56:c1:c3:95:55:6e:43:8b:d3:cd:
                    bb:6a:8b:31:0f:63:2c:e9:06:99:fe:ca:f1:6a:d0:
                    8c:9f:5b:70:25:12:fe:5e:b5:77:3f:d7:28:6d:a3:
                    c6:48:a4:1d:28:d0:c3:1a:a0:97:7e:b5:b9:e3:4d:
                    3f:9a:f4:b9:43:ab:ff:3c:16:8a:2b:c5:ed:fd:08:
                    4e:ad:1a:36:54:03:9c:c3:06:ae:57:18:2e:79:f4:
                    37:37:66:bd:43:71:ed:83:7b:a0:fa:ae:6f:21:da:
                    39:85:9f:5d:bf:d5:be:8f:b3:f5:b9:10:c9:7e:55:
                    82:48:96:68:4e:2c:3d:f9:68:c0:05:a4:b8:9e:e5:
                    d3:91:77:e9:d7:61:c0:a7:10:01:f6:44:75:dc:48:
                    9a:30:75:88:b1:96:81:1d:19:16:67:d6:35:99:78:
                    e0:2f:7e:de:e9:30:54:2c:76:bb:7b:43:fb:3f:50:
                    10:0e:33:8d:fe:28:46:0b:cb:c3:47:9b:13:9d:3a:
                    d6:53:8b:19:fe:8f:a0:7a:f3:23:5f:20:24:f3:08:
                    c9:72:42:94:79:c8:93:8c:ad:ef:a1:de:3d:44:dd:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BE:E0:62:4D:97:AF:A5:1B:63:68:78:D5:36:4E:8D:B2:7E:9A:51
            X509v3 Authority Key Identifier:
                keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:48:0b:0f:df:a6:28:b2:2f:1d:00:a5:2a:58:df:ba:fe:3f:
         00:d1:4a:ac:20:24:0e:76:4c:94:9c:df:53:96:c7:7e:5b:a7:
         41:5f:25:82:1b:24:35:35:fd:61:8f:60:cb:45:0f:71:0a:53:
         d6:bb:3f:d9:fe:2b:bd:2d:42:e6:c6:0d:1c:ad:45:1b:52:26:
         40:db:df:a1:ec:b9:60:f3:12:e5:e5:32:2d:ee:66:98:db:ee:
         e2:b3:5a:0b:85:8b:1c:7d:66:5d:3b:4b:f7:64:29:ee:5e:d7:
         1d:38:c7:d6:18:be:c8:43:04:e9:ea:74:80:5c:d1:b8:0d:ee:
         e6:72:f7:d6:d3:57:db:63:76:79:a4:59:45:b0:a3:f9:b3:1c:
         1e:1c:c6:d4:e9:18:19:0d:5c:81:88:07:78:ab:92:81:bd:5c:
         e2:59:25:93:3e:06:a4:8e:2f:07:47:5d:26:16:8b:e1:6e:0b:
         42:89:83:95:c6:24:e8:45:86:c4:9a:84:68:2f:a7:68:87:c7:
         f4:d6:90:2a:d6:86:9c:01:5b:a2:03:b6:03:00:6c:35:21:89:
         49:dd:ef:d4:d9:19:d2:26:6b:6b:18:62:93:dd:51:8a:02:b9:
         c8:6d:75:45:05:70:45:52:26:4b:ec:46:9a:00:dc:0e:e7:95:
         c3:08:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:05:04 2026 by rpki-client